Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.554exploits catalogados

39.165CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.281Exploit-DB 24.485GitHub PoC 16.153VulnCheck XDB 9636Nuclei 4476Metasploit 3523✓ solo verificadosrecientes populares riesgo

16.153 exploits

GitHub PoC

n0c71v3x/CVE-2026-78745

CVE-2026-78745CRITICAL04 sep 2026

An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352E_DMO allows a remote attacker to execute arbitrary code via

48RIESGO

abrir ↗

GitHub PoC

CVE-2020-1938 (Ghostcat) Tomcat AJP file read/file include PoC with python3 port

CVE-2020-1938CRITICALbajo ataque04 sep 2026

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc

100RIESGO

abrir ↗

GitHub PoC

CVE‑2026‑82329 is a critical authentication bypass in JFrog Artifactory (CVSS 9.8) allowing unauthenticated attackers to obtain full administrative privileges. Actively exploited in the wild. Affects self‑hosted versions before patches. PoC for authorized testing only.

CVE-2026-82329CRITICALbajo ataque03 sep 2026

Potential authentication bypass leading to administrative access in Artifactory

98RIESGO

abrir ↗

GitHub PoC

Vulnerability Analysis of CVE-2026-83548 affecting SonicWall SMA1000 security systems.

CVE-2026-83548CRITICALbajo ataque03 sep 2026

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern

93RIESGO

abrir ↗

GitHub PoC

AJCloud AJY IPC Firmware Path Traversal via jdbhttpd

CVE-2026-56718HIGH03 sep 2026

AJCloud AJY IPC Firmware Path Traversal via jdbhttpd

41RIESGO

abrir ↗

GitHub PoC★ 13

CVE-2026-65643 – cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 tools: Full Exploit (reverse shell, webshell, persistence, root passwd, file R/W, mass scan, Tor), Blue Team PoC (detection, reporting, audit). w/Python. Only Use Ethically, Stay Legal <3

CVE-2026-65643HIGH03 sep 2026

Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.

41RIESGO

abrir ↗

GitHub PoC

CVE-2026-52810 - Draft or TODO

CVE-2026-52810HIGH03 sep 2026

Gogs: Write to readonly repositories using receive-pack + service=git-upload-pack confusion

41RIESGO

abrir ↗

GitHub PoC

CVE-2026-19949 - Draft or TODO

CVE-2026-19949HIGH03 sep 2026

All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution

41RIESGO

abrir ↗

GitHub PoC

PoC — OIDC id_token accepted without signature/audience/expiry check in Tugtainer (GHSA-crjc-6vc7-xrfh, CVE-2026-87004, CVSS 8.1).

CVE-2026-87004HIGH03 sep 2026

Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification

41RIESGO

abrir ↗

GitHub PoC

PoC for CVE-2026-4813

CVE-2026-4813CRITICAL03 sep 2026

Code injection in the Lutece Core

48RIESGO

abrir ↗

GitHub PoC

Research lab and exploit chain for CVE-2026-75604: path traversal in the Next.js incremental cache, to RCE on Windows.

CVE-2026-75604CRITICAL03 sep 2026

Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

63RIESGO

abrir ↗

GitHub PoC

CVE-2026-59822 - Draft or TODO

CVE-2026-59822HIGHbajo ataque03 sep 2026

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

71RIESGO

abrir ↗

GitHub PoC★ 1

Struts2 S2-045/S2-046 CVE-2017-5638 detection & exploitation tool

CVE-2017-5638CRITICALbajo ataqueransomware03 sep 2026

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-20212 - Draft or TODO

CVE-2026-20212CRITICAL03 sep 2026

Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability

48RIESGO

abrir ↗

GitHub PoC

CVE-2026-80428 PoC

CVE-2026-80428CRITICAL03 sep 2026

ILIAS PHP Object Injection via Shibboleth Logout

48RIESGO

abrir ↗

GitHub PoC

CVE-2026-80428 PoC

CVE-2026-80428CRITICAL03 sep 2026

ILIAS PHP Object Injection via Shibboleth Logout

48RIESGO

abrir ↗

GitHub PoC★ 5

Windows HTTP.sys integer overflow -> nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM exploit; for authorized testing

CVE-2026-62735HIGH03 sep 2026

Windows HTTP.sys Elevation of Privilege Vulnerability

41RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-64788 PoC — IOGPUFamily Use-After-Free (iOS 26.6 / 23G71)

CVE-2026-64788MEDIUM03 sep 2026

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe

33RIESGO

abrir ↗

GitHub PoC

SQL Injection via ORDER BY Shortcode in plg_content_dpcalendar — DPCalendar Free ≤ 10.11.2

CVE-2026-78070MEDIUM03 sep 2026

Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2

33RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)

CVE-2026-65343HIGH03 sep 2026

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.

41RIESGO

abrir ↗

GitHub PoC

Stored XSS via Location Title in DPCalendar Free

CVE-2026-78071HIGH03 sep 2026

Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0

41RIESGO

abrir ↗

GitHub PoC

Recovery notes for proxmox advisory ID: PSA-2026-00043-1 (CVE-2023-54391)

CVE-2023-54391CRITICAL03 sep 2026

Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter

63RIESGO

abrir ↗

GitHub PoC

tcollins-hashicorp/vault-cve-2026-5006-audit

CVE-2026-5006MEDIUM02 sep 2026

Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths

33RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2026-82329 — JFrog Artifactory unauthenticated authentication bypass ("phantom join key" -> forged service admin token)

CVE-2026-82329CRITICALbajo ataque02 sep 2026

Potential authentication bypass leading to administrative access in Artifactory

98RIESGO

abrir ↗

GitHub PoC★ 86

CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)

CVE-2026-65343HIGH02 sep 2026

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.

41RIESGO

abrir ↗

GitHub PoC

nabeelmkhan/CVE-2026-78839

CVE-2026-78839HIGH02 sep 2026

An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading

41RIESGO

abrir ↗

GitHub PoC

Saku0512/CVE-2026-84361-poc

CVE-2026-84361HIGH02 sep 2026

Composer: Perforce source URL permits P4PORT `rsh:` command execution

41RIESGO

abrir ↗

GitHub PoC

CVE-2026-9335: KerasFileEditor and load_weights follow h5py ExternalLinks, disclosing arbitrary local HDF5 file contents in keras ≤ 3.14.0. Advisory + verified PoCs.

CVE-2026-9335MEDIUM02 sep 2026

Improper Handling of HDF5 ExternalLinks in keras-team/keras

33RIESGO

abrir ↗

GitHub PoC★ 3

CVE-2026-65349 PoC — getattrlist OOB write in vfs_attr_pack_internal (iOS 26.6 / 23G71)

CVE-2026-65349MEDIUM02 sep 2026

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1,

33RIESGO

abrir ↗

GitHub PoC

CVE-2026-38577

CVE-2026-38577CRITICAL02 sep 2026

Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.

48RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.